app.globalentrepreneurshipconsortium.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ba:cf:5d:a9:f9:de:f1:a8:4f:e2:43:b7:74:84:8b:24:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.globalentrepreneurshipconsortium.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:cf:5d:a9:f9:de:f1:a8:4f:e2:43:b7:74:84:8b:24:14
Serial Number (int): 412017300500594895416661969809552630817812
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:ba:6a:ab:a0:ee:18:6d:b4:b6:19:39:56:b1:89:22:b0:a4:d6:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:af:d6:32:8d:af:9d:51:d5:f6:e6:c1:01:52:1f:b1:73:74:6a:d3
Fingerprint (sha256): 7f:2b:8b:6e:21:7b:b2:eb:d2:9f:74:1b:45:33:5c:af:ed:c5:cc:98:45:16:fa:80:3b:e5:ce:d9:dd:df:fc:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.globalentrepreneurshipconsortium.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.globalentrepreneurshipconsortium.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.globalentrepreneurshipconsortium.org

Other certificates including the domain name globalentrepreneurshipconsortium.org

(limited to 100 certificates)
app.globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
globalentrepreneurshipconsortium.org
globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
2019.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org
app.globalentrepreneurshipconsortium.org

Certificate

The complete raw certificate details for app.globalentrepreneurshipconsortium.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgISBLrPXan53vGoT+JDt3SEiyQUMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTAwNDA4MTBaFw0x
OTAyMDgwNDA4MTBaMDMxMTAvBgNVBAMTKGFwcC5nbG9iYWxlbnRyZXByZW5ldXJz
aGlwY29uc29ydGl1bS5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDbgN6KeflJWw3ljdfo51dKLaVA1AzruEZ5VL5dLuxjW9hwT9zj2w1abJC2d5K6
fhE+rNQP72QgM/NF/EN/ZqbCQQGUlPnCUu2ytccX3L1tg7P2C2vEFiJxB8f7XSM+
vef77eeeNFjvcM1SSaGPtt7sLcrfbGsIQWr8dw2r4ztui66dnrhP1rL1zVJXkMIS
bQS2DofWX0ZLWaGLp+THVX5ylyhUaHyWtC105F2GcTdMTFapjo512QPY22MY72wY
GaaptV7I+aMKaBx7aHCoYetM6zrGiPGS7DjPbascWbXNGrxQ8KyCZvXvhs+c9AAX
BJxQdtDoiM8dwtmkiFgxPfa6mEg14D+ayR2D/ft9wVqG41yKfmD2bIZLkuyiWSUF
XHie73jcAU6jTbp95g/JevO4fWi/U+Ph6mfSEsSgOV0khpPg5viXK7pQG3jvb8BY
lrtPXkfI/yY55zJhBUg3I7uUYptUTZY4GS+DIHgudzkm4RNGVgIOBvMioo9QQxzy
DWUw0A/uLVNrL5VjTHdRvQCXf8xWUVslHrH40ZhZz1nx+Mvu2hrGrmugWyxCUTDS
yPNm9mD0yC8iuuF0y87ocxM/8ZE1euZFIvTdcQH08YFbyBzzbcWJt2mmQpy58EIB
sdtgMCvL2rQy8pGtap8v4jP6DvigTsSXhvwVLMgOjp0JEwIDAQABo4ICfTCCAnkw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRcumqroO4YbbS2GTlWsYkisKTWwDAfBgNV
HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI
KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI
KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDMG
A1UdEQQsMCqCKGFwcC5nbG9iYWxlbnRyZXByZW5ldXJzaGlwY29uc29ydGl1bS5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWb8
BTB+AAAEAwBHMEUCIDosQpXTMIVQY3V+U2cqI88XRI8Jy1yb/LHhshlR53IIAiEA
s6BcZsAMmOJZmchsFLRrtm2Ve+lxn2vSFfio3fahsigAdgApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWb8BTJnAAAEAwBHMEUCIQDKO7F1UjAeFMy8
W3jrtfroaQyfuThPxnGRyiyGaiwZ+QIgG3dOdUP9iefBvzLQJYWFCDd5feeIqG+D
2OhJROutC9YwDQYJKoZIhvcNAQELBQADggEBAJlgEJqzRt6hUq8xOhmGwIxt39oK
7WRTQocgqvzrzVsW3zZguZ2k2MHHSYbvHK/3QpFDPOaktQ6jJOvNKdaCCa3RLIik
Ce2d/zm2NJoL+z+0hfKJIL30ZOtMpmioxa3iHrBbLSXZxsKBUQweRGHVFnwJweiA
t75KwXETqO8DNKUn8wDpNsU1qhsZyu20hdfHnVWsUYIzH/oUE1uNbkIj23hjEgpk
qBabkS6fOItDAIX8X69Uo0r++Y02sL19cy9U/NKacdC8sHp2wNZI227UBuHFiekv
/xT3TC6hYrOOHYaP5pp8cVJ6oZ9rcaxRwOC2aa5CmGJR1NXFHYNzQdQBo9M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412017300500594895416661969809552630817812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 04:08:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 04:08:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.globalentrepreneurshipconsortium.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895495726198227177580107168507986834220722738759466733246898094200279970517763961850679497335696466129785694836569184992425640866030237818823473748779436303449060251840736565925470814559465773461241330047422971852189273093277063255603755627901475870823269465319980080693722431222406202244665481906073806049484048065478817884891589562150467685581354072765855072733915305378207814690296116198139681126739390447796562312079187349176503030330716078721403307772963583361243816228543003531705367816680038673204290813267829471284818008620812552803299034836864633475372041224623544610457141058357480198003550361484923007129477096151995296372127542155846938523759812144158899695309323313589433747885524042592771935634834877737617919329780515357586266404345141267177156337626592356046662147591158466825869409241904161811736933091840426958054591238819896013779613223329323438615971282015206242569408075015889199323043800813352953821408453288439546730415579796249239834937876697307244564547112447464863016056137822585361210668483475723154655357725210481589725666582546025462910080214547586914551720070814009010350350923209328720785055187952229268148497306598935940877132383649869397020947017874572694008948575541679131609891378481937125291657491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cba6aaba0ee186db4b6193956b18922b0a4d6c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.globalentrepreneurshipconsortium.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166fc05307e000004030047304502203a2c4295d330855063757e53672a23cf17448f09cb5c9bfcb1e1b21951e77208022100b3a05c66c00c98e25999c86c14b46bb66d957be9719f6bd215f8a8ddf6a1b228007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166fc0532670000040300473045022100ca3bb17552301e14ccbc5b78ebb5fae8690c9fb9384fc67191ca2c866a2c19f902201b774e7543fd89e7c1bf32d02585850837797de788a86f83d8e84944ebad0bd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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